325864cb1074765d4b1d76bc7057c8d2a351004bfb9a73fb613c6715dbab6f22 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-07_edd2e4d76bcd4737c1cea770f6182fe5_cryptolocker
Size

40KB
Sample

240907-hpjq9s1amj
MD5

edd2e4d76bcd4737c1cea770f6182fe5
SHA1

1ff33abc6782575c865bded63a80ea687f8833de
SHA256

325864cb1074765d4b1d76bc7057c8d2a351004bfb9a73fb613c6715dbab6f22
SHA512

4d5dd987b08ff3f6777dcd88b1c1d580333d8710b6680978fad267e083cf5854ca1d0957851938d2418b0022c02ea683d540e5d3c6d4c30a5122f3946062a23f
SSDEEP

768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVaD3TP7DFCw0pT:X6QFElP6n+gJQMOtEvwDpjBmzDU5N

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-07_edd2e4d76bcd4737c1cea770f6182fe5_cryptolocker
- Size
  
  40KB
- MD5
  
  edd2e4d76bcd4737c1cea770f6182fe5
- SHA1
  
  1ff33abc6782575c865bded63a80ea687f8833de
- SHA256
  
  325864cb1074765d4b1d76bc7057c8d2a351004bfb9a73fb613c6715dbab6f22
- SHA512
  
  4d5dd987b08ff3f6777dcd88b1c1d580333d8710b6680978fad267e083cf5854ca1d0957851938d2418b0022c02ea683d540e5d3c6d4c30a5122f3946062a23f
- SSDEEP
  
  768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVaD3TP7DFCw0pT:X6QFElP6n+gJQMOtEvwDpjBmzDU5N
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2